Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: GIcznEdOx6NQ2++np3KsRz463P3KWG4bIdQZKdhkTJQ=
Subject key identifier: E1:88:27:4C:F4:32:AA:D0:3B:AA:BA:F6:8F:DF:EC:21:D4:09:DF:D9
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 019D27E073EF477D0FC08FC82FA0F3D08349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 0755
Signing time: Thu 26 Mar 2026 02:01:54 +0000
Manifest this update: Thu 26 Mar 2026 02:01:54 +0000
Manifest next update: Fri 27 Mar 2026 02:01:54 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: R7vvroAL5NMf3NB+YnGU55p9wFBB2KAS6hVapIaABto=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:73:ef:47:7d:0f:c0:8f:c8:2f:a0:f3:d0:83:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Mar 26 02:01:54 2026 GMT
Not After : Mar 27 02:01:54 2026 GMT
Subject: CN=e188274cf432aad03baabaf68fdfec21d409dfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:50:7c:94:29:c0:35:f1:8a:8f:fa:3c:e7:
0d:5d:da:b1:59:73:22:ef:c8:cb:0c:5f:f1:2a:ea:
d5:12:32:c4:e7:64:36:e2:09:73:f0:21:78:20:bc:
b6:2b:1d:7b:af:7e:3b:12:6c:cc:48:ee:59:6c:b4:
8c:14:49:aa:b1:f4:be:9d:02:45:10:97:5b:c7:f9:
20:b5:1e:7a:28:d1:db:2c:51:f0:aa:c7:83:fc:74:
8a:0c:02:d9:4c:da:89:33:b8:42:ec:28:d6:93:e8:
b6:a5:7f:eb:06:9d:fc:14:fc:69:e9:ec:35:00:f5:
b5:23:23:c8:83:f0:7e:d8:93:95:c8:7e:41:26:43:
d2:8c:e4:86:3e:fe:7d:d8:8b:97:4b:76:cb:d3:ac:
5c:b7:c5:05:9f:02:af:70:c5:7b:7d:53:70:45:72:
49:44:23:5d:d5:82:a4:2a:9c:0a:12:56:4f:46:ee:
e0:33:6b:83:88:2d:db:7c:b0:0d:9b:d5:73:5d:c2:
3e:9d:1f:a2:f7:bb:f6:ba:f3:d4:30:1a:e8:05:f4:
05:f8:6b:a1:ba:f3:5a:8a:ae:19:e6:06:a0:5c:b1:
04:53:ca:4d:4d:87:b4:46:9b:df:61:1e:7e:29:89:
4f:fa:b8:18:aa:b9:82:65:d6:92:e4:69:28:b9:69:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:27:4C:F4:32:AA:D0:3B:AA:BA:F6:8F:DF:EC:21:D4:09:DF:D9
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:93:f8:38:06:a1:44:3b:65:2b:c9:3a:45:37:6d:8d:02:8f:
97:94:84:1a:b9:86:a6:e7:0c:23:79:18:27:8c:b6:e5:bd:18:
9f:ba:f1:53:90:88:ea:2e:92:b5:1c:af:0d:0d:67:70:f9:b0:
62:42:31:af:a6:07:3f:af:ee:48:5d:99:6b:dc:b3:7f:3a:e4:
01:ee:e5:6a:1b:f7:f1:0f:17:e0:57:14:78:ba:8a:e3:03:a3:
1b:16:7b:8c:33:40:30:b7:ae:c4:d2:44:fc:91:c3:49:7c:04:
97:98:34:88:a2:81:5f:c5:34:c5:a6:45:b7:96:8b:48:3f:c4:
1d:6b:b9:54:92:0d:1e:56:f0:46:44:22:27:76:f0:c9:3e:1f:
d9:b5:95:f8:10:43:30:f5:4b:6c:5b:c1:88:1e:f4:34:05:f9:
80:e3:23:ee:65:d9:9c:34:46:87:dd:d1:c0:c3:0a:79:98:11:
4c:99:60:85:f9:1e:e2:56:61:eb:04:9b:23:16:21:5d:1b:c5:
a5:29:78:54:3c:1c:10:71:2d:c7:db:5e:89:85:21:de:50:bc:
bd:93:6a:de:2f:cc:a7:d7:27:4f:23:94:e7:b1:4c:5e:c0:04:
0b:55:e2:2b:b9:3b:4b:3d:37:08:d2:8b:8f:6b:d7:37:09:f2:
5b:7e:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client